Bug 41647 - It is not possible to set global limits in the slapd.conf via UCR-Variable
It is not possible to set global limits in the slapd.conf via UCR-Variable
Status: CLOSED DUPLICATE of bug 34873
Product: UCS
Classification: Unclassified
Component: LDAP
UCS 3.2
Other Linux
: P5 normal (vote)
: UCS 4.1-3-errata
Assigned To: Felix Botner
Stefan Gohmann
:
: 41433 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-06-23 10:52 CEST by Michel Smidt
Modified: 2016-09-09 14:04 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Forked for project
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michel Smidt 2016-06-23 10:52:28 CEST
It should be possible to create global limits in the configuration (slapd.conf) by setting UCR variables.
e.g.
limits group/univentionGroup/uniqueMember="cn=Domain Admins,cn=groups,o=XY,o=ZZ" size.soft=2000 size.hard=5000 size.unchecked=100000 time.soft=10 time.hard=30
limits dn.exact="cn=admin,o=XY,o=ZZ" size=unlimited time=unlimited
limits dn.onelevel="cn=dc,cn=computers,o=XY,o=ZZ" size=unlimited time=unlimited
limits users size.soft=50 size.hard=500 size.unchecked=10000 time.soft=5 time.hard=25 size.pr=50 size.prtotal=10000
Comment 1 Michel Smidt 2016-06-23 10:53:07 CEST
*** Bug 41433 has been marked as a duplicate of this bug. ***
Comment 2 Felix Botner univentionstaff 2016-08-22 18:23:40 CEST
If this is enough

-> ucr set ldap/limits='group/univentionGroup/uniqueMember="cn=Domain Admins,cn=groups,o=XY,o=ZZ" size.soft=2000 size.hard=5000;dn.exact="cn=admin,o=XY,o=ZZ" size=unlimited time=unlimited;limits dn.onelevel="cn=dc,cn=computers,o=XY,o=ZZ" size=unlimited time=unlimited;users time.soft=-1 time.hard=-1' ...

-> more /etc/ldap/slapd.conf| grep limit

limits group/univentionGroup/uniqueMember="cn=Domain Admins,cn=groups,o=XY,...
limits dn.exact="cn=admin,o=XY,o=ZZ" size=unlimited time=unlimited
limits limits dn.onelevel="cn=dc,cn=computers,o=XY,o=ZZ" size=un...
limits users time.soft=-1 time.hard=-1

than this is a duplicate of 34873

*** This bug has been marked as a duplicate of bug 34873 ***
Comment 3 Stefan Gohmann univentionstaff 2016-09-07 06:30:23 CEST
OK
Comment 4 Stefan Gohmann univentionstaff 2016-09-09 14:04:13 CEST
OK, closed